CVE-2020-24557

Trend Micro Multiple Products Improper Access Control Vulnerability

Apex One

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10…

1. Sep 2020

Ausgewertete Quellen

• Hersteller
  https://success.trendmicro.com/solution/000263632
• Hersteller
  https://success.trendmicro.com/solution/000267260
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-20-1094/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-24557
• CISA
  Trend Micro Multiple Products Improper Access Control Vulnerability
• NVD
  CVE-2020-24557